Thursday, January 31, 2013, 09:21 am
Apple again blocks latest version of Java through OS X anti-malware system
The recently released Java 7 Update 11 has been blocked by Apple through its XProtect anti-malware feature in OS X.
Oracle issued the latest update to Java earlier this month to fix a serious zero-day security flaw. The threat was so serious that the U.S. Department of Homeland Security had recommended that all Java 7 users disable or uninstall the software until a patch was issued.
Apple took action on its own and quietly disabled the plugin through its OS X anti-malware system. And as noted by MacGeneration on Thursday, Apple has again updated its OS X XProtect list, this time to block Java 7 Update 11.
Because Oracle has yet to issue a newer version of Java that addresses any outstanding issues, Mac users are prevented from running Java on their system.
Over the last few years, Apple has moved to gradually remove Java from OS X. The Mac maker dropped the Java runtime from the default installation for OS X 10.7 Lion when the operating system update launched in 2010. Java vulnerabilities have been a common exploit used by malicious hackers looking to exploit the OS X platform.
Most notably, the "Flashback" trojan that spread last year was said to have infected as many as 600,000 Macs worldwide at its peak. Apple addressed the issue by releasing a removal tool specifically tailored for the malware, and also disabled the Java runtime in its Safari web browser starting with version 5.1.7.
On Topic: Mac OS X
- Apple seeds OS X 10.8.4 beta build 12E52 to developers
- iMovie update fixes issues with camera recognition, iOS movie imports
- Apple fixes Thunderbolt target disk mode in software update
- First look: Pixelmator 2.2 Blueberry goes live in the Mac App Store
- Apple seeds OS X 10.8.4 beta build 12E47 to developers with no known issues







I completely understand that Apple is acting to protect the vast majority of its users, users who have no idea what Java is or even if they have it installed.
But shouldn't they also have an option for users who know the risks but want Java anyway, an option to allow the installation of the plugin?